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I. INTRODUCTION 

Secret keys, by definition, refer to common random- 
ness available to a sender and receiver at distant loca- 
tions while any other party has absolutely no informa- 
tion about it. Generating secret keys requires preserving 
secrecy from a third party (2j. An information-theoretic 
model in the classical setting is the "wiretap channel" [|[ , 
where the sender wants to communicate with one legiti- 
mate receiver while keeping the eavesdropper completely 
ignorant of the message sent. Private communication 
can be achieved via encryption once secret keys are gen- 
erated. Secret keys are a valuable resource that can be 
used to achieve information transmission tasks. 

The above scenario has a quantum analogue, where 
secret keys are generated over a quantum channel. The 
secret key generating protocol has been proposed by sev- 
eral authors [4, l5|j ISj , and in [7[ , it has been shown that 
the capacity of a quantum channel for transmitting pri- 
vate classical information is the same as the capacity of 
the same channel for generating secret keys. Further- 
more, neither capacity is enhanced by public classical 
communication in the forward direction. This raises the 
interesting question of how these different resources in- 
terconvert in a quantum information protocol, and was 
partially answered in [H, H, Q . 

The formal treatment of quantitative interconversions 
between nonlocal information processing resources is 
studied in wherein such an asymptotically faithful 
conversion is expressed as a resource inequality (RI). 
These resource inequalities are extremely powerful, and 
sometimes lead to new quantum protocols [8| . For exam- 
ple, they allow us to relate the family protocols to several 
well-known quantum protocols by direct application of 
teleportation or superdense coding, etc. 

In this paper, we study the private classical commu- 
nication capacity over a quantum channel assisted by a 
secret key. We show that secret keys are a useful nonlocal 
resource that can increase the private classical communi- 
cation capacity over quantum channels; however, unlim- 



ited secret keys do not help. The trade-off between the 
rate of secret key consumption and the rate of increased 
private classical communication is presented quantita- 
tively. Under the RI framework, our protocol can be 
understood as a "private father protocol" due to its sim- 
ilarity to the original father protocol. Furthermore, the 
unassisted private classical communication capacity Q 
can be seen as a child protocol. 

This paper is organized as follows. Section [TT1 contains 
definitions, notation, and relevant background material. 
Section IIIII contains statements and proofs of our main 
result. In section [TVl we rewrite our result under the RI 
framework, and show how to recover the unassisted pri- 
vate classical capacity from ours. We conclude in section 
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II. NOTATION 

Consider a classical-quantum system XQ in the state 
described by an ensemble {p(x), p x } with p(x) defined on 
X and p x being density operators on the Hilbert space 
Hq of system Q. Such a state p x ® of systems XQ can 
be represented by the "enlarged Hilbert space" (EHS) 
representation: 



J2p(x)\x)(x\ x 



where X is a dummy quantum system and {\x) : x S X} 
is an orthonormal basis for the Hilbert space Hx of 
system X. The reduced density operators of systems 
X and Q are p x — Tyq p x ® = J2 x p(x)\x)(x\, and 
pQ = Tlx p x ® respectively. The von Neumann entropy 
of the quantum state p® is H(Q) p — — Tr(p Q logp^). 
(We will omit the subscript p when the state is clear from 
the context.) Notice that the von Neumann entropy of 
the dummy quantum system X is equal to the Shannon 
entropy of random variable X whose probability distri- 
bution is p{x). The conditional entropy is defined as 



H(Q\X) = H(QX) - H{X). 



(1) 
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It should be noted that conditioning on classical vari- 
ables (systems) amounts to averaging; therefore (Q]) is 
also equal to 



H(Q\X) = ^2p(x)H(Q) Px . 



(2) 



The mutual information is 

I(X; Q) = H(X) + H(Q) - H(QX). 

Next, we will briefly introduce definitions and proper- 
ties of typical sequences and subspaces [To| • 

Let ^ denote the set of typical sequences associated 
with some random variable X such that for the proba- 
bility distribution p defined on the set X 



7-n 
X,S 



Vx £ X, 



N(x\x n ) 



p(x) 



< 6 



where N(x\x n ) is the number of occurrences of x in the 
sequence x n := x\ ■ ■ ■ x n of length n. 

Assume the density operator p® of system Q has the 
following spectral decomposition: pQ = ^2 y p(y)\y)(y\- 
Then we can define the typical projector as 



ll Q;S 



E \y n w 



(3) 



where \y n ) is a state in Hq 11 . For a collection of states 
{p Xl x £ X}, the conditional typical projector is defined 
as 



n%|x,^") = (gK 



Q|*,<5' 



(4) 



where I x — {i : xi ~ x} is the indicator and IIq s 
denotes the tensor product of the typical projector of the 
density operator p® in the positions given by the set I x 
with the identity everywhere else. 

Fixing 5 > 0, we will need the following properties of 
typical subspaces and conditionally typical subspaces: 



Tra%IIZ lXtS (x n ) > 1-e 



Trie 



< a 



(5) 

(6) 
(7) 



n 



Ql x4x n )a^ lXiS (x n ) < pr^\x,sW) (8) 



where a = 2 n ^ H ^ +c ^ and j3 = 2 n ^ H ^ x ^- cS ^ for e = 
2~~ nc s and some constants c and c'. 

Finally we need some facts about trace distances 
(taken from [l(|). The trace distance between two den- 
sity operators p and a can be defined as 

||p-er||i = Tx|p-cr|, 



where \A\ = V At A is the positive square root of A' A. 
The monotonicity property of trace distance is 



Up 



RB 



111 



> 



(9) 



III. MAIN RESULT 

A. Classical-quantum channels 

We begin by defining our private classical communica- 
tion protocol for a {c — > qq} channel from sender Alice 
to receiver Bob and eavesdropper Eve. The channel is 
defined by the map W : x — > a BE , with x £ X and 
the state a BE defined on a bipartite quantum system 
BE; Bob has access to subsystem B and Eve has access 
to subsystem E. Alice's task is to transmit, by some 
large number n uses of the channel W, one of {0, l}' 1 ^ 
equiprobable messages to Bob so that he can identify the 
message with high probability while at the same time 
Eve receives almost no information about the message. 
In addition, Alice and Bob are given some private strings 
(secret keys), picked uniformly at random from the set 
{0, l} nRs , before the protocol begins. The inputs to the 
channel W" 8 ™ are classical sequences x n £ X n with prob- 
ability p n (x n ). The outputs of W®™ are density opera- 
tors o BE = a BE <g> ■ ■ ■ ® a BE living on some Hilbert space 
■H !i 1 . 

An (n, R, R s , e) secret key-assisted private channel code 
consists of 

• An encryption map / : {0, l} nR x {0, 1}™-^ 
{0, l} nR , i.e. / generates an index random variable 
K uniformly distributed in {0, \} nR based on the 
classical message embodied in the random variable 
M and the shared secret key embodied in the ran- 
dom variable 5*. Furthermore, /(m, si) ^ /(m, S2) 
for si 7^ S2 and /(mi, s) 7^ f(m2, s) for mi 7^ 7712. 

• An encoding map E : {0,l} nR — > X n . Alice en- 
codes the index k as E(k) and sends it through the 
channel W® n , generating the state 

1 



~A B B S BE 



E 

se{o,i}"«s 



sis 



s(s 



1 

2™^ 



BE 



E a E(f(m,s)) 
me{0,l}" E 



(10) 



• A decoding POVM {Ak'}k'e{o where A*,/ is a 
positive operator acting on B and taking on val- 
ues k! . Bob need to infer the index k through the 
POVM; 

• A decryption map g : {0, l} nR x {0, l} nR ° -> 
{0, l} n _R, wnere g(f(jn,s),s) = m, Vs,m. This al- 
lows Bob to recover Alice's message as m' — g(k', s) 
based on k' and s; 



such that 



wBB B 
I — T 



<0- E \h<6, 



(11) 

where T BE is the state of the subsystem BE after Bob's 
decoding operation, and 



— y 



|m)(m|" i 
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contains the private classical information that is decou- 
pled from Eve's state a E . 

A rate pair (R, R s ) is called achievable if for any e, 5 > 
and sufficiently large n there exists an (n, R — 6, R s + 
5, e) private channel code. The private capacity region 
Cpf(W) is a two-dimensional region in the (R, R s ) plane 
with all possible achievable rate pairs (R, R s ). 

We now state our main theorem. 

Theorem 1 The private channel capacity region 
Cpp{yV) is given by 



c PF (w) = (J -c£],(>v®») 



(12) 



Corollary 1 Consider an ensemble {p n (x n ), cr E n}x n eX n 
with average density operator a E — XL" p n (x n )o~ E n, let 
random variables X\,Xi, As all be independently dis- 
tributed according to p n and C = (A S ) S(E [ S ]. Then for all 
e, S > and sufficiently large n, 

Pr{ oe(C) > 2e + 19^} < 2a exp(-K Se 3 /3/a). (16) 

w/iere a = 2"™"+°*], /3 = 2 n W E \ x ^~ c5 \ S = 



oe(C) = 



S6[S] 



where the notation Z means the closure of a set Z and p roo f We can relate to Lemma ED through the iden- 



Cpl(yV) is the set of all R s >0,R>0 such that 



tifications: X — > X n , a x — > a x n, p — > p™, cr 



i? < 7(A;B) CT -/(A;£) CT + i? s 
where BE\X is given by W and cr is o/ i/ie /orm 

XBE _ „/-„\\„\/„\X o BE 



(13) 
(14) 



p(x)\x)(x\ x <g> a x 



Proving that the right hand side of p2|) is achievable is 
called the direct coding theorem, whereas showing that it 
is an upper bound is called the converse. 

For the direct coding part, we will need the following 
lemma from II ill, a quantum generalization of the cover- 
ing lemma in [12j . 

Lemma 1 (Covering Lemma) We are given an en- 
semble {p{x), o x }x£X with average density operator a — 
J2xexP( x ) a x- Assume the existence of projectors IT and 
(Tl x )xex with the following properties (ix G X): 

Tr cr x IT x > 1 - e, 

Trc^IT > 1- e, 

Trn < a, 

Tlxo-xlix < P- 1 !^. 

In addition, we require Tl x and o~ x to commute for all x. 
The obfuscation error of a set S C X is defined as 



oe{S) 



xes 



and is an upper bound on the probability of distinguish- 
ing the fake average from the real one. Define the set 
C = (-X"s) S 6[s]j where X s is a random variable chosen 
independently according to the distribution p on X , and 
S = |~7 -1 a//3] for some < 7 < 1. Then 

Pr{oe(C) > 2e + 19^} < 2aexp(-K e 3 /7)- (15) 



n -> U em\x\+i) and n * 



n 



E\X 



s (x n ) with 



U E \xA x )-\ otherwise. 
The four conditions now read (for all x n G X n ), 

, 1- IT" .." , . 1 (17) 



Tra E n U n Elxs (x n )>l-e, 
TrlE 



Trcr^n»^ |+1) >l-e, 



l E,S{\X\ + l) 



< a, 



(18) 
(19) 



^ n E \xA xn )^ u mA xn ) ^ p-^ E \xA xn )- (2°) 

These follow from the properties of typical subspaces and 
conditionally typical subspaces mentioned before. □ 

We will also need the Holevo-Schumacher- 
Westmoreland (HSW) theorem [HEi]. 



Proposition 1 (HSW theorem) Given 



an ensem 



ble 



a XB = ^p(x)\x){x\ x ®a 



B 

x ' 



xex 



and integer n, consider the encoding map E : [K] — ► X n 
given by E(k) = X^, where k G [K] : 1,2, ••• , K, and 
{Xk} are random variables chosen according to the i.i.d. 
distribution p n . For any e, 5 > and sufficiently large n, 
there exists a decoding POVM set (Ak)ke[K\ on B f or the 
encoding map E with K = 2 ra [ / (*; s )- 2 ( c + c '< 5 )' 5 ], and some 
c, such that for all k, 

Ej2W(k'\k)-6(k,k')\ < e . 

k> 

Here ir(k'\k) is the probability of decoding k' conditioned 
on k having been encoded: 



ir(k'\k) = Tr(A fc /cr£:( fe) ), 



(21) 



S(s,s') is the delta function and the expectation is taken 
over the random encoding. 
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Figure 1: Private classical communication capacity region of 
{c — > qq} channel when assisted by a pre-shared secret key. 



Now we are ready to prove the direct coding theorem. 
Proof [direct coding theorem] 

The capacity region is shown in Fig. [T] This trade-off 
region includes two limit points P and Q. When R s = 
(Point P), the private classical capacity of W is equal to 
I(X; B) — I(X; E). This is the well-known private classi- 
cal communication capacity proved in 7]. In our case, it 
suffices to prove Point Q is optimal; that is, the achiev- 
ability of the rate pair (R,R 8 ) = (I(X; B), I(X; E)). 
The idea of the proof is as follows: instead of sacrific- 
ing nI(X; E) bits of classical message to randomize Eve's 
knowledge of the state, Alice and Bob use a pre-shared 
secret key to do so. For all e, 6 > and sufficiently large 
n, we show below that a private information transmission 
rate of I(X; B) is achievable if Alice and Bob consume a 
pre-shared secret key with rate I(X; E). 

Fix e, 5 > and a sufficiently large n. Consider the en- 
semble {p n (x n ), a B n E } of the channel output W® n . There 
exists an encoding map E : K — > Xk for Alice on the 
encryption output K = f{M, S) where Xk is i.i.d. with 
distribution p n , M represents the classical message taken 
values from {0, l} nR , and S represents the pre-shared se- 
cret key values taken from {0, l} nRs . Here {Xk} serves 
as a HSW code. 

In the following, we will explicitly use f(m, s) in- 
stead of its index k. For each m 6 {0, l} nR , define 
C m = (-X"/(m,s))sE[2" fl s]. C m works as a covering code as 
define in CorollaryEQ Choose R s = I(X; E) + 3(c + c'6)6. 
For any m € {0, l} nR , define the logic statement l m by 
oe(C m ) < 2e + 19-y/e, where 



oe(C m ) 



^17 E CT ^/( 



° = E^- and a E n = Tr B a UE . By Corollary 

m 

Pr{not £ m } < 2acxp(-K 2 nRs e 3 P/a) , Vm. (22) 

The probability of (f2"2")) can be made < e2~ nR when n is 
sufficient large. 



We now invoke Proposition [T] Choose R = I(X; B) — 
2(c + c'S)S. There exists a POVM (Afc/) fe / e r 0)1 i»B acting 
on B such that for all k, 



Ej2W(k'\k)- 5(k,k')\ <e . (23) 

k' 

After Bob performs the POVM, the state (fTUl) becomes 

f = i E l fi X s l As ® l s X s l Ss ®iE T(fc'l/(m, a)) 



rn.k' 



\k'){k'\ B ®a^ nma) , 



which is close to 
^° = ^717 E 

~ S 



IsVsl^ ® \ S )(s\ B ° 



in the sense that E||T — TT 1 1 1 < e by condition 

Bob applies the decryption map g to his system B, 
resulting in a state X A,BsBE , By the monotonicity of 
trace distance we have 



1 1 - Iq 111 < 6 



where 



By the Markov inequality, Pr{not £q} < yfe, where £o is 
the logic statement 



IIT^-T^lli < y/i. 

By the union bound, 



(24) 



Pr{not (£ Mik---M\ m \)} < ^Pr{not <e + ^/e. 



i=0 



Hence there exists a specific choice of {Aj( m s )}, say 
{ x f(m,s)}i f° r which all these conditions are satisfied. 
Consequently, 



\T BE -r B ^a E \\ 1 < ||T BB -T^ B ||i 



+ \\T* b -t b ®<t e \\ 1 
< 2e + 20\/i . 



□ 



as claimed. 
Proof [converse] 

We shall prove that, for any S, e > and sufficiently 
large n, if an (n, R, -R s ,e) secret keys assisted private 
channel code has rate R then (IT51) and (1141) hold. 
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Figure 2: Private classical communication protocol assisted 
by pre-shared secret key. 



The private classical communication protocol is shown 
in Fig. [2] 

nR = H(K) 

= I(K; K 1 ) + H(K\K') 

< I(K;K') + l+nelog\X\, 

where the last inequality follows from Fano's inequality: 

H(K\K') < 1 + Pr{AT ^ K'}nR, 

and Pi{K ^ K'} < e is guaranteed by the HSW theorem. 
Hence, 



I{K-K') < I{K-B n ) 
< I{X n ;B n ), 



(25) 
(26) 



where the first inequality follow from the data processing 
inequality while the second inequality comes from the 
Markov condition K -> X n -> B n E n . We then have 

R-6 < -I(X n ;B n ), (27) 
n 

where without loss of generality e < 6io g\ x \ and n > | . 



This proves (fl4|) . 
On the other hand, 

I{MS; M'S) = I(MS; M'\S) + 7(5; MS) 

<I(K;M'\S) + H(S) (28) 

<I(K;B n \S)+H(S) (29) 

</(X™;B"|S') + i7(S') (30) 

where O follows from I(MS; M'\S) = I(K; M'\S) and 
I(S;MS) < H(S), (HU) follows from data processing 
inequality, and (|30|) follows from the Markov condition 
K — > X™ — > B n E n . Furthermore, ([M]) guarantees that 



e > 7(M;7; n |5) 
= I(K;E n \S) 



(31) 
(32) 
(33) 



Combining (f30f and (f33|) gives 

7(M; M') < /(MS*; M'S) (34) 

^/(X^B"^-/^^) (35) 

+ i?(S') + e. (36) 

Hence 

nR = H(M) (37) 

= I(M; M') + H(M\M') (38) 

< J(M;M') + 1 + ne log | Af |, (39) 

where (|39|) follows from the Fano's inequality. Choosing 
e < 6 io| | at| and " > f , (ES) and ([M]) give 

iZ-tf < — \I(X n -B n \S) -I(X n :E n \S) + H(S)} (40) 
n 

= - \I(X n ;B n \S) - I(X n ;E n \S)}+ R s , (41) 
n 

where R s = — LJ -. Since we can write 

- [I{X n ; B n \S) - I{X n ]E n \S)] , (42) 

as the average with respect to the distribution of S, and 
K s — * X" — > B™X™ holds for each s, we can choose a 
particular value of s that maximizes p^|) . 



B. Generic quantum channels 

Suppose now that Alice and Bob are connected by a 
noisy quantum channel J\f : B(7i' A ) — > B(Hb), where 
B(TL) denotes the space of bounded linear operators on 
TL. Let Utf : B{TL' A ) — » B(Hbe) be an isometry extension 
of A/" that includes the unobserved environment -E which 
is completely under the control of the eavesdropper Eve. 
Theorem Q] then can be rewritten as the following 

Theorem 2 The private channel capacity region 
Cpp(Af) is given by 



Cpf(N) = |J -c£j,(A/-®»), 



(43) 



n=l 



where the notation Z means the closure of a set Z and 
C ( pl(Af) is the set of all R s >0,R>0 such that 

R < I{A;B) a -I{A;E) a + R s (44) 
R < I{A]B) a , (45) 

where a is of the form 

a ABE = u A^BE m AA> l 

for some pure input state \ip) AA whose reduced density 



operator p 



A' 



isometric extension of M . 



J2 x P( x )Px an d Utf : A' — > BE 
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With the spectral decomposition of the input state 
p A = J2 x p( x )Px> each £//v induces a corresponding 
{c — > gg} channel. Therefore, the results of the previ- 
ous section can be directly applied here. 



IV. PRIVATE FATHER PROTOCOL 

In this section, we will phrase our result using the the- 
ory of resource inequalities developed in Q . The channel 
Af : A — > B assisted by some rate R s of secret key shared 
between Alice and Bob was used to enable a rate R of 
secret communication between Alice and Bob. This is 
written as 

(AO + R s [cc] * >R[c^c\*. (46) 

This resource inequality holds iff (R S ,R) £ Cpf(AI), 
with Cpf{N) given in Theorem [2] The "if" direction, 
i.e. the direct coding theorem, followed from the "corner 
points" 

(Af) +I(A;E) [cc] *>I(A;B)[c^c}*. (47) 

This resource inequality (|47|) is called the private father 
protocol due to its similarity of the father protocol in Q . 

We can recover the unassisted private channel capacity 
result in Q: 

(Af) > I c {A)B)[c — > c]*. (48) 

This resource inequality can be obtained by appending 
the following noiseless resource inequality 

[c^c]*>[cc\* (49) 
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V. CONCLUSION 

In this paper, we have found a regularized expression 
for the secret keys assisted capacity region Cpf(A/) of 
a quantum channel Af for transmitting private classical 
information. Our result shows that secret key are a valu- 
able nonlocal resource for transmitting private informa- 
tion. One interesting problem is to investigate how secret 
keys can be applied in other quantum protocols. For ex- 
ample, it might be plausible that the entanglement gener- 
ation protocol could be boosted by secret keys. However, 
the result seems unlikely. In particular, it is impossible to 
construct a secret key-assisted entanglement generation 
protocol by simply coherifying the protocol proposed in 
this paper. Another open problem is to obtain a single- 
letterized formula of Theorem [TJ 
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